chore: Prepare for release of 1.1.0

- Update workflow versions
- Update dependencies
- Update to modern Ruby style

Signed-off-by: Austin Ziegler <austin@zieglers.ca>

Author: halostatue

.github/workflows/ci.yml

@@ -37,7 +37,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+      - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
         with:
           ruby-version: '3.4'
           rubygems: latest
@@ -73,7 +73,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+      - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
         with:
           ruby-version: '3.4'
           rubygems: latest
@@ -126,7 +126,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+      - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
         with:
           ruby-version: ${{ matrix.ruby }}
           rubygems: latest
@@ -173,7 +173,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+      - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
         with:
           ruby-version: ${{ matrix.ruby }}
           rubygems: latest
@@ -222,7 +222,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+      - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
         with:
           ruby-version: ${{ matrix.ruby }}
           rubygems: latest
@@ -268,7 +268,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+      - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
         with:
           ruby-version: ${{ matrix.ruby }}
           rubygems: latest
@@ -314,7 +314,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+      - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
         with:
           ruby-version: ${{ matrix.ruby }}
           rubygems: latest

.github/workflows/dependency-review.yml

@@ -38,4 +38,4 @@ jobs:
           persist-credentials: false
 
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@bc41886e18ea39df68b1b1245f4184881938e050 # v4.7.2
+        uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3

.github/workflows/publish-docs.yml

@@ -0,0 +1,63 @@
+name: Publish docs
+
+on:
+  workflow_dispatch:
+
+  workflow_call:
+
+permissions: {}
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  publish_docs:
+    name: Publish docs from main
+    runs-on: ubuntu-latest
+    environment: release
+
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
+
+    steps:
+      - name: Harden the runner
+        uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
+        with:
+          egress-policy: audit
+
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          persist-credentials: false
+
+      - id: rubygems
+        run: |
+          ruby -e \
+            'print "version=", Gem::Specification.load(ARGV[0]).rubygems_version, "\n"' \
+            minitar.gemspec >>"${GITHUB_OUTPUT}"
+
+      - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
+        with:
+          bundler-cache: false
+          ruby-version: ruby
+
+      - name: Install dependencies
+        run: |
+          gem update --system="${RUBYGEMS_VERSION}"
+          bundle install --jobs 4 --retry 3
+        env:
+          RUBYGEMS_VERSION: ${{ steps.rubygems.outputs.version }}
+
+      - name: Build documentation
+        run: |
+          rake docs
+
+      - name: Upload documentation artifact
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
+        with:
+          path: doc
+
+      - name: Deploy documentation
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5

.github/workflows/publish-gem.yml

@@ -62,9 +62,9 @@ jobs:
         run: |
           ruby -e \
             'print "version=", Gem::Specification.load(ARGV[0]).rubygems_version, "\n"' \
-            mime-types.gemspec >>"${GITHUB_OUTPUT}"
+            minitar.gemspec >>"${GITHUB_OUTPUT}"
 
-      - uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
+      - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
         with:
           bundler-cache: false
           ruby-version: ruby
@@ -77,3 +77,17 @@ jobs:
           RUBYGEMS_VERSION: ${{ steps.rubygems.outputs.version }}
 
       - uses: rubygems/release-gem@a25424ba2ba8b387abc8ef40807c2c85b96cbe32 # v1.1.1
+
+      - name: Show the status if release failed
+        if: failure()
+        run: |
+          git status
+          git diff
+
+  publish_docs:
+    needs: release
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
+    uses: ./.github/workflows/publish-docs.yml

.github/workflows/reviewdog.yml

@@ -36,7 +36,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: reviewdog/action-typos@627388e238f182b925d9acd151432f9b68f1d666 # v1.17.2
+      - uses: reviewdog/action-typos@fe961cdbe416990b23bc1597325891575ef2dd7c # v1.18.0
 
   actionlint:
     if: ${{ github.event.action != 'closed' }}
@@ -61,4 +61,4 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: reviewdog/action-actionlint@e37e2ca68a70112d21e135229272da28ce2d0d5a # v1.66.1
+      - uses: reviewdog/action-actionlint@95395aac8c053577d0bc67eb7b74936c660c6f66 # v1.67.0

.github/workflows/zizmor.yml

@@ -18,8 +18,6 @@ jobs:
 
     permissions:
       security-events: write
-      contents: read
-      actions: read
 
     steps:
       - name: Harden Runner
@@ -29,23 +27,14 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             api.github.com:443
-            release-assets.githubusercontent.com:443
-            files.pythonhosted.org:443
+            ghcr.io:443
             github.com:443
-            objects.githubusercontent.com:443
-            pypi.org:443
+            pkg-containers.githubusercontent.com:443
 
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
-      - uses: astral-sh/setup-uv@4959332f0f014c5280e7eac8b70c90cb574c9f9b # v6.6.0
-
-      - run: uvx zizmor --persona pedantic --format sarif . > results.sarif
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+      - uses: zizmorcore/zizmor-action@5ca5fc7a4779c5263a3ffa0e1f693009994446d1 # v0.1.2
         with:
-          sarif_file: results.sarif
-          category: zizmor
+          persona: pedantic

.gitignore

@@ -14,4 +14,6 @@
 /tmp/
 /vendor/
 /website/index.html
+!test/fixtures/*.tar
+!test/fixtures/*.gz
 Gemfile.lock

.standard.yml

@@ -6,6 +6,6 @@ ignore:
   - '*.gemspec'
   - pkg/**/*
 
-plugins:
-  - standard-minitest
-  - standard-thread_safety
+# plugins:
+#   - standard-minitest
+#   - standard-thread_safety

CHANGELOG.md

@@ -9,6 +9,18 @@
 
   - Support large file size encoded in PAX extension header. [#121][pull-121].
 
+- Bug fix:
+
+  - Resolved [#52][issue-52]. The initial solution was developed with the
+    assistance of Claude Sonnet 4 via Kiro, but nearly every line of the
+    solution and tests were rewritten as part of a comprehensive review of all
+    tests.
+
+- Breaking Change:
+
+  - Removed `Minitar::PosixHeader.new_from_stream` which should have been
+    removed with 1.0.0 and has been deprecated for a decade or so.
+
 - Governance:
 
   Changes described below are effective 2024-12-31.
@@ -27,14 +39,14 @@
 
 ## 1.0.2 / 2024-08-23
 
-- Bugfix:
+- Bug fix:
 
   - Minitar 1.0.1 was released with an unchanged gemspec. Reported by Debashish
     Biswas in [#65][issue-65].
 
 ## 1.0.1 / 2024-08-08
 
-- Bugfix:
+- Bug fix:
 
   - Resolve a constant lookup issue. The accepted fix has been provided by Aram
     Price in [#58][issue-58].
@@ -252,6 +264,7 @@
 [issue-31]: https://github.com/halostatue/minitar/issues/31
 [issue-45]: https://github.com/halostatue/minitar/issues/45
 [issue-46]: https://github.com/halostatue/minitar/issues/46
+[issue-52]: https://github.com/halostatue/minitar/issues/52
 [issue-58]: https://github.com/halostatue/minitar/issues/58
 [issue-63]: https://github.com/halostatue/minitar/issues/63
 [issue-65]: https://github.com/halostatue/minitar/issues/65

Gemfile

@@ -1,13 +1,12 @@
-# -*- ruby -*-
 # frozen_string_literal: true
 
 # NOTE: This file is not the canonical source of dependencies. Edit the Rakefile, instead.
 
 source "https://rubygems.org/"
 
-if ENV["COVERAGE"]
-  gem "simplecov", require: false, platforms: [:mri]
-  gem "simplecov-lcov", require: false, platforms: [:mri]
+group :development do
+  gem "solargraph", platform: :mri
+  gem "fiddle", platform: :windows
 end
 
 gemspec